Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ioyW3D_KSBvDRd-w-9myKhsTjrw.roa
File: ioyW3D_KSBvDRd-w-9myKhsTjrw.roa (raw, json)
Hash identifier: AYTEWCKWaNR5bgPjOZ08ReAjhPnXsGAyqld6sthtd6Q=
Subject key identifier: 8A:8C:96:DC:3F:CA:48:1B:C3:45:DF:B0:FB:D9:B2:2A:1B:13:8E:BC
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0197AC345F652CCB696E88C7C4DDE0B7EE65
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ioyW3D_KSBvDRd-w-9myKhsTjrw.roa
Signing time: Thu 26 Jun 2025 12:26:42 +0000
ROA not before: Thu 26 Jun 2025 12:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56449
IP address blocks: 81.15.138.0/23 maxlen: 23
81.15.138.0/24 maxlen: 24
81.15.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:34:5f:65:2c:cb:69:6e:88:c7:c4:dd:e0:b7:ee:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jun 26 12:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a8c96dc3fca481bc345dfb0fbd9b22a1b138ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:22:9f:50:e4:02:95:f6:aa:67:8f:13:d7:
23:12:03:92:63:d1:0c:af:2d:3e:0c:da:fe:6f:84:
9d:ee:32:1a:3a:13:67:49:8c:57:18:06:ae:42:9d:
bb:91:b0:e4:a5:79:f6:90:e2:0a:12:21:3e:98:72:
57:6f:a7:a1:f1:56:2d:05:d1:93:c5:33:2d:dc:ca:
a2:f6:55:17:da:62:ed:0e:79:cd:de:c7:bd:54:7d:
59:01:97:90:cb:b8:b5:fa:de:cd:bc:d0:a2:7c:e8:
06:e9:90:e2:d4:9c:61:c5:d8:27:31:54:7e:ca:d1:
d9:29:29:07:3b:fd:08:f1:fb:68:b1:0b:9d:68:e9:
b9:ff:14:0d:bc:53:27:4e:93:ff:b1:8d:ab:c2:bb:
d4:47:2d:6a:df:53:37:79:0c:59:4f:76:44:c5:93:
ec:12:98:59:1b:81:9b:2b:54:e4:45:d1:98:43:cb:
ab:92:0c:79:7a:8c:ea:4a:bc:1d:46:cf:99:e5:3b:
86:49:e6:7f:5e:5c:91:0b:6c:9c:b3:e2:4b:8a:01:
5b:35:76:ec:1a:20:b3:b8:3b:1f:b1:74:22:c3:bf:
24:a9:72:cd:81:bb:2c:23:b4:0d:a0:6e:21:4d:70:
a7:55:80:87:19:43:28:41:98:3b:02:32:e6:02:f2:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8C:96:DC:3F:CA:48:1B:C3:45:DF:B0:FB:D9:B2:2A:1B:13:8E:BC
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ioyW3D_KSBvDRd-w-9myKhsTjrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:b2:ba:a5:e6:ef:2c:1a:89:19:ee:0b:dd:42:74:e2:89:aa:
7e:45:f0:d1:f1:63:72:5d:7c:5e:83:86:9a:42:e8:47:09:65:
d8:e8:6f:17:3f:d6:f9:88:ef:e8:9c:cd:fb:cf:69:5d:e7:e7:
46:e7:07:69:59:31:95:6e:97:53:79:da:b3:08:57:b3:c5:e7:
d1:96:fe:91:87:68:46:d9:04:d3:eb:49:bc:3a:8a:50:5c:2e:
cc:dd:6b:05:a0:81:5d:c6:c3:e0:5e:51:a6:1f:2c:0e:c6:a8:
1b:1a:18:fb:a8:71:2e:0c:02:64:03:62:d4:ac:5a:a0:17:66:
68:c4:a7:71:a0:0f:fa:1b:b0:07:71:9b:ec:87:88:95:91:91:
11:1a:62:1e:2b:1b:24:e7:f7:de:5a:01:92:68:03:db:cf:2e:
83:11:bb:1a:ab:42:81:f9:05:44:0d:43:09:55:be:27:0a:f9:
63:36:bf:fc:a9:eb:35:ee:2b:c2:87:ae:0c:be:8f:bf:52:51:
d0:eb:f9:ea:0e:2f:be:5b:36:96:b6:f0:fb:af:05:2c:91:ea:
2b:10:50:c0:67:1f:91:2a:53:9d:8f:5f:4b:a5:89:40:4a:c2:
8e:83:b5:a3:26:75:be:97:8f:63:d5:62:fb:d1:e4:82:20:20:
d4:a0:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:54:23 2025 by rpki-client